v1.7.0

• Added pickle load inspection PIC100
• Added django safe strings inspection DJG102
• Added hardcoded temp path read or write inspection TMP101
• Added XML standard library DoS inspection XML100
• Added XML RPC dotted paths inspection XML200

v1.6.0

• GitHub Action now supports "failure on warning"
• GitHub Action now always uses latest image
• GitHub Action supports setting path to custom inspection XML file

v1.5.0

Add annotations to the GitHub action

1.4.5

Update release notes

1.4.4

Update patch notes for 1.4.4

1.4.3

Update action.yml

1.4.2

• Fixed a bug where packages that had a vulnerability in safetydb but no CVE record would raise a NPE to PyCharm issue#33

1.4.1

• Changed YML100 to not match when loader=SafeLoader is used
• Altered PW100 to only match on == and != operators, reducing false positives

1.4.0: Merge pull request #30 from tonybaloney/django_sql

• Added DJG101 Using quoted, parametrized literal will bypass Django SQL Injection protection

1.3.0: Merge pull request #29 from tonybaloney/rest_of_bandit

• Added TRY100 check for try..except..pass statements
• Added TRY101 check for try..except..continue statements
• Added AST100 check for assert usage outside of a test
• Added NET100 check unspecified binding
• Added PAR100 check for host key bypass in paramiko ssh client usage
• Added OS100 check calls to os.chmod() for dangerous POSIX permissions